Method and system for user induced password scrambling
A system, method, and computer-readable medium are provided to protect passwords for computer applications by providing a user-triggered password scrambling mechanism. Scrambling is enabled with a user configurable character within the password to be a trigger. Once triggered, a user can enter several incorrect password strings without fear of being locked out of the system. Ultimately, a user can enter a correct password string or a modified version of the correct password string to gain access to the system. Through password scrambling, an observer will have a more difficult time determining the correct version of the password. This improves system security, thereby protecting valuable information, resources, and reputation of an enterprise provider.
1. A computer-implementable method for authorizing access to a system, the method comprising:
storing a user-defined index value corresponding to an index value position in a stored password string;
comparing a first character string with the stored password string;
authorizing access to the system if the first character string matches the stored password string;
if the first character string does not match the stored password string, then
permitting entry of N additional character strings for comparison with the stored password string, when each character of the first character string matches each corresponding character of the stored password string with an exception of a character at the index value position, and when the character at the index value position of the first character string is a single-digit integer value N, wherein the stored password string and the first character string including the exception are the same length.
2. The method of claim 1 further comprising:
authorizing access to the system if a character string of the N additional character strings matches the stored password string after entry of that character string.
3. The method of claim 1 further comprising:
authorizing access to the system if each character of the N th character string of the N additional character strings matches each corresponding character of the stored password string with the exception of the character at the index value position.
4. The method of claim 1 further comprising:
denying access to the system if any character of the N th character string of the N additional character strings does not match each corresponding character of the stored password string with the exception of the character at the index value position.
5. The method of claim 1 further comprising:
storing a user-defined index shift value and index shift frequency value;
advancing the index value by the index shift value after a time period equal to the index shift frequency.
6. The method of claim 5 further comprising:
providing a current index value in response to a request from an authorized source.
7. The method of claim 6 , wherein the request is provided by a messaging system.
8. An application server having restricted access, the application server comprising:
a memory storing a password string, an application, and a user-defined index value corresponding to an index value position in the password string;
a network interface, coupled to a network, and configured to communicate with a remote network node;
a processor, coupled to the memory and the network interface, and configured to
compare a first character string received from the remote network node to the password string,
authorize access to execute the application if the first character string matches the password string,
if the first character string does not match the stored password string, then
permit entry of N additional character strings, from the remote network node, for comparison with the stored password string, when each character of the first character string matches each corresponding character of the stored password string with an exception of a character at the index value position, and when the character at the index value position of the first character string is a single-digit integer value N, wherein the stored password string and the first character string including the exception are the same length.
9. The system of claim 8 , wherein the processor is further configured to authorize access to execute the application if a character string of the N additional character strings matches the stored password string after entry of that character string.
10. The system of claim 8 , wherein the processor is further configured to authorize access to execute the application if each character of the N th character string of the N additional character strings matches each corresponding character of the stored password string with the exception of the character at the index value position.
11. The system of claim 8 , wherein the processor is further configured to deny access to execute the application if any character of the N th character string of the N additional character strings does not match each corresponding character of the stored password string with the exception of the character at the index value position.
12. The system of claim 8 , wherein
the memory further stores a user-defined index shift value and index shift frequency value; and
the processor is further configured to advance the index value by the index shift value after a time period equal to the index shift frequency.
13. The system of claim 12 wherein the processor is further configured to provide a current index value in response to a request from an authorized source.
14. The system of claim 13 , wherein:
the network interface is further configured to communicate with a messaging system; and
the request is provided by the messaging system.
15. A non-transitory, computer-readable storage medium embodying computer program code, the computer program code comprising computer executable instructions configured for:
storing a user-defined index value corresponding to an index value position in a stored password string; comparing a first character string with the stored password string;
authorizing access to a system if the first character string matches the stored password string;
if the first character string does not match the stored password string, then
permitting entry of N additional character strings for comparison with the stored password string, when each character of the first character string matches each corresponding character of the stored password string with an exception of a character at the index value position, and when the character at the index value position of the first character string is a single-digit integer value N, wherein the stored password string and the first character string including the exception are the same length.
16. The non-transitory, computer-readable storage medium of claim 15 , wherein the computer executable instructions are further configured for:
authorizing access to the system if a character string of the N additional character strings matches the stored password string after entry of that character string.
17. The non-transitory, computer-readable storage medium of claim 15 , wherein the computer executable instructions are further configured for:
authorizing access to the system if each character of the N th character string of the N additional character strings matches each corresponding character of the stored password string with the exception of the character at the index value position.
18. The non-transitory, computer-readable storage medium of claim 15 , wherein the computer executable instructions are further configured for:
denying access to the system if any character of the N th character string of the N additional character strings does not match each corresponding character of the stored password string with the exception of the character at the index value position.
19. The non-transitory, computer-readable storage medium of claim 15 , wherein the computer executable instructions are further configured for:
storing a user-defined index shift value and index shift frequency value;
advancing the index value by the index shift value after a time period equal to the index shift frequency.